Lockout

You are the blue team. A scripted red-team attacker is coming for your box, acting every few seconds - probing, breaking in, and planting backdoors to keep its foothold. Your job: inspect the system, harden it, keep the protected service running, and lock the attacker out for good.

It all happens in a real terminal. No fake "press X to hack" - you actually read & edit configs, set firewall rules, chase down cron jobs, and evict rogue accounts, the same moves you would make defending a real machine.

What you do:

- Harden a wide-open SSH config before the red team walks in

- Lock down a leaked private key, restrict SSH to the corporate VPN

- Keep a web app (and later a database) running while under attack

- Run incident response on an already-breached box: find the backdoor key, the rogue root account, and the cron job re-adding their access, then evict them

- Win the instant the attacker has no way in and nothing left behind

Features:

- 8-level campaign that ramps from a calm practice run to a full incident-response siege, each level with its own distinct challenge

- A live threat readout and a step-by-step onboarding coach so you are never lost

- A scripted attacker that reacts to your machine's actual state - there are no scripted "win buttons," only real posture

- Interactive tutorial that teaches the terminal from scratch

- After-action review of every move, yours and theirs

Who it's for:

Students and competitors training for blue-team events like CCDC, CyberPatriot, and NCAE Cyber Games, or anyone who wants to learn practical Linux hardening and incident response by doing it.

Planned features:

More in-depth challenges

Co-op "full hackathon" simulations

PvP Red-vs-blue modes

KOTH modes